All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lite-server | Lite-server_project | - (including) | - (including) |
References
- https://gist.github.com/lirantal/832382155e00da92bfd8bb3adea474eb
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3175617
- https://security.snyk.io/vuln/SNYK-JS-LITESERVER-3153540
- https://gist.github.com/lirantal/832382155e00da92bfd8bb3adea474eb
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3175617
- https://security.snyk.io/vuln/SNYK-JS-LITESERVER-3153540